Who processesyour data, and where.
Every company that handles data for Nixyum, what it does, and the region it does it in. Plus our commitments, transfers, and who to write to.
The companies that help run Nixyum.
- Supabase01Relational database & authenticationAccount credentials, profile data, the link between each account and its Nex and Nyx, posts, all relational user dataEUDPA
- Fly.io02Application servers (the API and real-time messaging)Requests and messages in transit, session tokens while a request is handled, request logs (IP address, user ID, endpoint)EUDPA
- Vercel03Frontend hosting & edge deliveryAuth cookies, session tokens, edge cache, IP addressesGlobal edge, EU pinning configuredDPA
- Backblaze B204Media & file storageUser-uploaded photos, videos, attachments, file hashesEUDPA
- Upstash (Redis + QStash)05Session cache, rate limiting, job queueSession tokens, cached profile data, rate-limit counters per user/IPEUDPA
- Resend06Transactional email deliveryEmail addresses, recipient names, IP addresses, notification contentEUDPA
- Firebase Cloud Messaging07Push notificationsDevice tokens, notification payloadsGoogle Cloud GlobalDPA
- Bunny.net08Content delivery networkCached user media, IP addresses, request logsGlobal edge, EU pinning configuredDPA
- Cloudflare09DNS, reverse proxy and CDN, TLS, DDoS and bot protection (including the check at sign-up, login and password reset) for nixyum.com and support.nixyum.comIP addresses, request headers (including the user agent), URLs and cookies of requests to those sites, handled transiently at the nearest edge; browser and device signals for the bot checkGlobal edge networkDPA
- RunPod10Computing capacity for Nixyum's own safety models (automated content checks)Content sent for automated safety checks: text, images, video and audio, including media and voice in private messagesEU/EEADPA
DPA status: data processing terms are in place with every processor, either signed or incorporated into the provider's terms of service. Copies are on file.
Compliance commitment
Nixyum LLC is a dual-identity social platform registered and operating in Georgia. We process personal data in accordance with the Georgian Law on Personal Data Protection (No. 3144/2023) and apply GDPR-equivalent standards for all EU data subjects.
Every third-party processor is bound by data processing terms: a signed Data Processing Agreement (DPA), or the provider's terms of service where the DPA is incorporated in them. This register is maintained as required by Articles 27–28 of the Georgian Personal Data Protection Law and GDPR Article 30.
The link between an account and its two identities, Nex and Nyx, is our highest-sensitivity data category. It is stored only in our primary database (hosted by Supabase, EU region, under a DPA) and is not shared with any processor in identified form. The service uses it automatically, for sign-in and safety enforcement. Only a small number of staff with a specific permission can see it, and every time one of them does, it is recorded.
NCII — 48-hour removal
Nixyum voluntarily applies the 48-hour removal standard of the US TAKE IT DOWN Act to every request, whatever the requester's country. We operate a notice-and-takedown process with a 48-hour removal commitment that starts when we receive a complete request.
To submit a removal request for non-consensual intimate content, including AI-generated depictions, use our removal form. All submissions are confidential.
Cross-border transfers
Nixyum is established in Georgia. Most processors store data in EU regions.
- Georgia → EUTransfer to a jurisdiction with adequate protection. The EU is recognised as adequate by Georgian PDPS/SAO.
- EU → GeorgiaCovered by Standard Contractual Clauses (SCCs) embedded in each processor DPA where applicable.
- EU → USA (Resend, Firebase, Cloudflare)Transfers proceed under SCCs as detailed in each processor's DPA.
Contact
- Privacy & data protection
- [email protected]
- Data subject requests (DSAR)
- [email protected]
- Security disclosures
- [email protected]
- Legal & compliance
- [email protected]
- Trust & Safety
- [email protected]
- Data controller
- Nixyum LLC, Reg. No. 400458045, Georgia